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Current Claim Schedule 

2 Claims 1-24 (cancelled). 

1 25. (Currently Amended) A method of electronically issuing an electronic negotiable 

2 document (END) comprising: creating as data an END and storing this in e tamper- 

3 resistant document carrier hardware, the document carrier hardware containing a unique 

4 public-secret key pair for signing and verifying, th e secret k e y b e ing g e n e rat e d within tho 

5 docum e nt carri e r, and a unique document carrier identifier; signing the unique document- 

6 carrier identifier, the END and an END identifier using the secret key of the public-secret 

7 key pair, and storing the result in the document carrier hardware . 



1 26. (Currently Amended) A method according to Claim 25 of issuing an END, further 

2 comprising generating a time stamp representing the time of issue and storing this with 

3 the END in the tamper-resistant document carrier hardware before the e ncryption signing 

4 step. 

1 27. (Currently Amended) A method according to Claim 25 of issuing an END, including 

2 the step of calculating a hash value of the END and/or the time stamp value and storing 

3 this hash value instead of the full END in the tamper-resistant document carrier hardware, 

4 before the said encryption signing step. 



1 28. (Previously Presented) A method according to Claim 25 of issuing an END, in which 

2 the document carrier identifier is a device number and the END identifier is a serial num- 

3 ber. 



4 



PATENTS 
105005-0044C1 



1 29. (Currently Amended) A method according to claim Claim 25 of issuing an END, in 

2 which the END identifier is supplemented with data representing a water mark unique to 

3 the issuer. 



1 30. (Currently Amended) A method according to claim Claim 25 of issuing an END, 

2 comprising the step of calculating a hash value of the data to be e ncrypted by signed us- 

3 ing said secret key, in place of the full data. 

1 31. (Currently Amended) A method according to claim Claim 25 of issuing an END, in 

2 which the document carrier hardware stores a negotiability status flag indicative of 

3 whether the END stored therein » is negotiable or non-negotiable, and including the step 

4 of setting the flag to "negotiable" after the result of the encryption has been stored in the 

5 document carrier hardware . 

1 32. (Currently Amended) A method according to eteka Claim 25 of issuing an END, in 

2 which the document carrier hardware includes a counter for counting a serial number, 

3 indicative of the number of times that the END has been negotiated since issue, and com- 

4 prising the step of setting the counter to zero after the result of the encryption has been 

5 stored in the document carrier hardware . 

1 33. (Currently Amended) A tamp e r Tamper -resistant document carrier hardware adapted 

2 to store an END in accordance with the method of claim Claim 25, said hardware com- 

3 prising read only software for controlling the steps of storing the END, encrypting the 

4 END and other data with the pre-stored secret key, and storing the result in a memory. 

1 34. (Currently Amended) A document Document carrier hardware according to Claim 

2 33, in which the memory includes a negotiability status flag capable of being set either to 

3 "negotiable" or to "non-negotiable 1 . 
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1 35. (Currently Amended) A document Document carrier hardware according to Claim 

2 33, in which the memory includes a counter for storing a serial number representative of 

3 the number of times the END has been negotiated. 

1 36. (Currently Amended) A method of electronically negotiating an END between a 

2 seller and a buyer each possessing a tamper-resistant document carrier hardware having 

3 its own public-secret key pair, in which the END is stored in the seller's document carrier 

4 hardware in the form of END data, and the signature generated by the secret signing-key 

5 of a document carrier of the issuer of the END, together with a negotiability status flag 

6 indicative of whether the END is currently negotiable from the document carrier hard- 

7 ware on which it is stored, comprising establishing mutual recognition between the seller 

8 and buyer using one or more predetermined protocols between the r e sp e ctiv e buyer's and 

9 seller's document carri e rs carrier hardwares: verifying in the seller's document carrier 

10 hardware that the negotiability status flag is "negotiable" and aborting the negotiation if 

1 1 not; sending the public encryption key of the buyer's document carrier hardware to the 

12 seller's document carrier hardware, and using it to encrypt the message comprising the 

13 END together with the negotiability status flag; sending that encrypted message to the 
H buy e r buyer's document carrier hardware: decrypting that message using the buyer's se- 

15 cret decryption key, and setting the negotiability status flag for that END of the buyer's 

16 and seller's document carriers carrier harwares respectively to "non n e gotiabl e " "negotia- 
n ble" and "n e gotiabl e " " non-negotiable" . 

1 37. (Currently Amended) A method of electronically negotiating an END between a 

2 seller and? a buyer each possessing a tamper-resistant document carrier hardware having 

3 its own public-secret key pair, in which the END is stored in the seller's document carrier 

4 hardware in the form of END data, and the signature generated by the secret signing key 

5 of a document carrier hardware of the issuer of the END, together with a serial number 

6 counter indicative of the number of times that the END has been negotiated since issue, 

7 comprising establishing mutual recognition between seller and buyer using one or more 

8 predetermined protocols between the r e spective document carri e rs buyer's and seller's 
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9 document carrier hardwares verifying in the seller's document carrier hardware that the 

10 END, if it has been stored previously in that document carrier hardware, has a different 

1 1 counter value this time and is therefore negotiable; sending the public encryption key of 

12 the buyer's document carrier hardware to the seller's document carrier hardware, and us- 
n ing it to encrypt the message comprising the END together with the counter; sending that 

14 encrypted message to the buy e r buyer's document carrier hardwarei decrvpting that mes- 

15 sage using the buyer's secret decryption key, and incrementing the counter by one. 

1 38. (Currently Amended) A method according to Claim 36, in which each document car- 

2 rier hardware is installed originally with a certificate comprising a digital signature of its 

3 unique identifier and of its public key. 

1 39. (Currently Amended) A method according to Claim 37, in which each document car- 

2 rier hardware is in stall e d installed originally with a certificate comprising a digital sig- 

3 nature of its unique identifier and of its public key. 

1 40. (Currently Amended) A method according to Claim 38, in which the certificate 

2 unique to the document carrier hardware on which the END was originally issued is 

3 stored with the END in the seller's document carrier hardware . 

1 41 . (Currently Amended) A method according to Claim 39, in which the certificate 

2 unique to the document carrier hardware on which the END was originally issued is 

3 stored with the END in the seller's document carrier hardware . 

1 42. (Currently Amended) A method according to Claim 38, in which the certificate of 

2 the buyer's document carrier hardware is sent to the seller's document carrier hardware in 

3 which it is authenticated and the negotiation is aborted if authentication fails. 



7 



PATENTS 
105005-0044C1 



43. (Currently Amended) A method according to Claim 39, in which the certificate of 
the buyer's document carrier hardware is sent to the seller's document carrier hardware in 
which it is authenticated and the negotiation is aborted if authentication fails. 

44. (Currently Amended) A method according to Claim 36, in which the buyer's docu- 
ment carrier hardware, after decrypting the message using its secret key, verifies the sig- 
nature of the issuer on the END, and informs the issuer in the event that authentication 
fails. 

45. (Currently Amended) A method according to Claim 37, in which the buyer's docu- 
ment carrier hardware, after decrypting the message using its secret key, verifies the sig- 
nature of the issuer en of the END, and informs the issuer in the event that authentication 
fails. 

46. (Currently Amended) A method according to Claim 25, of issuing an END on a 
document-carrier hardware followed by a method of negotiating an END between a seller 
and a buyer each possessing a tamper-resistant document carrier hardware having its own 
public-secret key pair, in which the END is stored in the seller's document carrier hard- 
ware in the form of END data, and the signature generated by the secret signing-key of a 
document carrier hardware of the issuer of the END, together with a negotiability status 
flag indicative of whether the END is currently negotiable from the document carrier 
hardware on which it is stored, comprising establishing mutual recognition between the 
seller and buyer using a predetermined protocol between the r e sp e ctiv e buyer's and 
seller's document carri e rs carrier hardwares; verifying in the seller's document carrier 
hardware that the negotiability status flag is "negotiable" and aborting the negotiation if 
not; sending the public encryption key of the buyer's document carrier hardware to the 
seller's document carrier hardware, and using it to encrypt the message comprising the 
END together with the negotiability status flag; sending that encrypted message to the 
buy e r buyer's document carrier hardware; decrypting that message using the buyer's se- 
cret decryption key, and setting the negotiability status flag for that END of the buyer's 
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17 and seller's document carri e rs carrier hardwares respectively to "non-negotiable" and 

is "negotiable". 

1 47. (Currently Amended) A method according to Claim 25, of issuing an END on a 

2 document-carrier hardware followed by a method of negotiating an END between a seller 

3 and a buyer each possessing a tamper-resistant document carrier hardware having its own 

4 public secret key pair, in which the END is stored in the seller's document carrier hard- 

5 ware in the form of END data, and the signature generated by the secret signing key of a 

6 document carrier hardware of the issuer of the END, together with a serial number 

7 counter indicative of the number of times that the END has been negotiated since issue, 

8 comprising establishing mutual recognition between seller and buyer using a predeter- 

9 mined protocol between th e ir r e sp e ctiv e docum e nt carri e rs the buyer's and seller's 

10 document carrier hardwares: verifying in the seller's document carrier hardware t hat the 
n END, if it has been stored, previously in that document carrier hardware, has a different 
12 counter value this time and is therefore negotiable, but aborting the negotiation if it is not 
B negotiable; sending the public encryption key of the buyer's document carrier hardware to 
14 the seller's document carrier hardware, and using it to encrypt the message comprising 

is the END together with the counter; sending that encrypted message to the buy e r buyer's 

16 document carrier hardware; decrypting that message using the buyer's secret decryption 

n key, and incrementing the counter by one. 

1 48. (Currently Amended) A method according to Claim 26, of issuing aad an END on a 

2 document- carrier hardware followed by a method of negotiating an END between a 

3 seller and a buyer each possessing a tamper-resistant document carrier hardware having 

4 its own public-secret key pair, in which the END is stored in the seller' s document carrier 

5 hardware in the form of END data, and the signature generated by the secret signing-key 

6 of a document carrier hardware of the issuer of the END, together with a negotiability 

7 status flag indicative of whether the END is currently negotiable from the document car- 

8 rier hardware on which it is stored, comprising establishing mutual recognition between 

9 the seller and buyer using a predetermined protocol between the respectiv e docum e nt car 
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fiera buyer's and seller's document carrier hardwares; verifying in the seller's document 
carrier hardware that the negotiability status flag is "negotiable" and aborting the negotia- 
tion if not; sending the public encryption key of the buyer's document carrier hardware to 
the seller's document carrier hardware, and using it to encrypt the message comprising 
the END together with the negotiability status flag; sending that encrypted message to the 
buy e r buyer's document carrier hardware, decrypting that message using the buyer's se- 
cret decryption key, and setting the negotiability status flag for that END of the buyer's 
and seller's document carri e rs carrier hardwares respectively to "non-negotiable" and 
"negotiable". 

49. (Currently Amended) A method according to Claim 26, of issuing an END on a 
document-carrier hardware followed by a method of negotiating an END between a seller 
and a buyer each possessing e tamper-resistant document carrier hardware having its own 
public secret key pair, in which the END is stored in the seller's document carrier hard- 
ware in the form of END data, and the signature generated by the secret signing key of a 
document carrier hardware of the issuer of the END, together with a serial number 
counter indicative of the number of times that the END has been negotiated since issue, 
comprising establishing mutual recognition between seller and buyer using a predeter- 
mined protocol between th e ir r e sp e ctiv e document carriers the buyer's and seller's 
document carrier hardwares ; verifying in the seller's document carrier hardware that the 
END, if it has been stored previously in that document carrier hardware, has a different 
counter value this time and is therefore negotiable, but aborting the negotiation if it is not 
negotiable; sending the public encryption key of the buyer's document carrier hardware to 
the seller's document carrier hardware, and using it to encrypt the message comprising 
the END together with the counter; sending that encrypted message to the buy e r buyer's 
document carrier hardware; decrypting that message using the buyer's secret decryption 
key, and incrementing the counter by one. 

50. (Currently Amended) A method according to Claim 48, in which the buyer's docu- 
ment carrier hardware, after decrypting the message with its secret key, verifies that the 
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END is still valid by taking its time stamp, and, if it has expired, informs the issuer of 
this, and aborts the negotiation before impl e m e nting incrementing the counter or setting 
the negotiation status flag. 

5 1 . (Currently Amended) A method according to Claim 49, in which the buyer's docu- 
ment carrier hardware, after decrypting the message with its secret key, verifies that the 
END is still valid by taking its time stamp, and, if it has expired, informs the issuer of 
this, and aborts the negotiation before implementing incrementing the counter or setting 
the negotiation status flag. 

52. (Currently Amended) A method according to Claim 36, including recovering the ne- 
gotiation of an END which has previously broken down, by providing the buyer's docu- 
ment-carrier hardware with the necessary secret key which has been reproduced by the 
issuer or by a trusted third party. 

53. (Currently Amended) A method according to Claim 37, including recovering the ne- 
gotiation of an END which has previously broken down, by providing the buyer's docu- 
ment-carrier hardware with the necessary secret key which has been reproduced by the 
issuer or by a trusted third party. 

54. (Currently Amended) A method according to Claim 36, including recovering an 
END lost from [[a]] primary document-carrier hardware, by activating a back-up docu- 
ment-carrier hardware [["]]which has previously been provided with back-up data repro- 
duced from the primary document-carrier hardware . 

55. (Currently Amended) A method according to Claim 37, including recovering an 
END lost from [[a]]primary document-carrier hardware, by activating a back-up docu- 
ment-carrier hardware which has previously been provided with back-up data reproduced 
from the primary document-carrier hardware . 
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56. (Previously Presented) A method according to Claim 52, comprising inhibiting the 
recovery until the expiry of the predetermined period of validity of the END. 

57. (Previously Presented) A method according to Claim 53, comprising inhibiting the 
recovery until the expiry of the predetermined period of validity of the END. 

58. (Previously Presented) A method according to Claim 54, comprising inhibiting the 
recovery until the expiry of the predetermined period of validity of the END. 

59. (Previously Presented) A method according to Claim 55, comprising inhibiting the 
recovery until the expiry of the predetermined period of validity of the END. 

60. (Currently Amended) A method of electronically negotiating an END, sold by a 
seller to a buyer, in which the buyer splits the END electronically into two or more parts 
and then negotiates those parts separately to one or more further buyers. 

61. (Currently Amended) A method according to Claim 60, in which each part is sub- 
jected to the digital signature of the said buy e r's document carrier hardware of said buyer 
which effects the splitting. 
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